Common use of Asset Inventory Clause in Contracts

Asset Inventory. i) Jamf will maintain an asset inventory of all media and equipment where Customer Content is stored. Jamf will restrict access to such media and equipment to authorized personnel of Jamf. Jamf will prevent the unauthorized reading, copying modification or removal of data media. ii) Jamf will classify Customer Content so that it is properly identified and will appropriately restrict access to Customer Content. Specifically, Jamf will ensure that no person appointed by Jamf to process Customer Content, will process Customer Content unless that person: 1) has a need to access Customer Content for the purpose of performing Jamf’s obligations under the Agreement; 2) has been authorized by Jamf in a manner consistent with Jamf’s information security policies; 3) has been fully instructed by Jamf in the procedures relevant to the performance of the obligations of Jamf under the Agreement, in particular the limited purpose of processing Customer Content; and 4) is aware that they are prohibited from copying any Customer Content transmitted by Customer to Jamf, provided, however, that Jamf may retain copies of Customer Content provided to it under the Agreement in its servers for backup and archive purposes until completion of the Agreement. iii) Jamf will further maintain measures to ensure that persons appointed by Jamf to process Customer Content will prevent the unauthorized input of Customer Content and the unauthorized inspection, modification, or deletion of stored Customer Content. iv) Jamf will maintain an appropriate approval process whereby approval is provided to personnel, contractors, and agents prior to storing Customer Content on portable devices or remotely accessing Customer Content. All approvals will be subject to measures designed to prevent the unauthorized reading, copying, modification or deletion of Customer Content during transfers of such content or during transportation of data media. If remote access is approved and granted, Jamf personnel, agents and contractors will use multi-factor authentication. Multi-factor authentication may include techniques such as the use of cryptographic certificates, one time password (OTP) tokens or biometrics.

Asset Inventory. i) Jamf will maintain an asset inventory of all media and equipment where Customer Content is stored. Jamf will restrict access to such media and equipment to authorized personnel of Jamf. Jamf will prevent the unauthorized reading, copying modification or removal of data media. ii) Jamf will classify Customer Content so that it is properly identified and will appropriately restrict access to Customer Content. Specifically, Jamf will ensure that no person appointed by Jamf to process Customer Content, will process Customer Content unless that person: 1) has a need to access Customer Content for the purpose of performing Jamf’s obligations under the Agreement; 2) has been authorized by Jamf in a manner consistent with Jamf’s information security policies; 3) has been fully instructed by Jamf in the procedures relevant to the performance of the obligations of Jamf under the Agreement, in particular the limited purpose of processing Customer Content; and 4) is aware that they are prohibited from copying any Customer Content transmitted by Customer to Jamf, provided, however, that Jamf may retain copies of Customer Content provided to it under the Agreement in its servers for backup and archive purposes until completion of the Agreement. iii) Jamf will further maintain measures to ensure that persons appointed by Jamf to process Customer Content will prevent the unauthorized input of Customer Content and the unauthorized inspection, modification, or deletion of stored Customer Content. iv) Jamf will maintain an appropriate approval process whereby approval is provided to personnel, contractors, and agents prior to storing Customer Content on portable devices or remotely accessing Customer Content. All approvals will be subject to measures designed to prevent the unauthorized reading, copying, modification or deletion of Customer Content during transfers of such content or during transportation of data media. If remote access is approved and granted, Jamf personnel, agents agents, and contractors will use multi-factor authentication. Multi-factor authentication may include techniques such as the use of cryptographic certificates, one time one-time- password (OTP) tokens tokens, or biometrics.

Asset Inventory. i) Jamf will maintain an asset inventory of all media and equipment where Customer Content is stored. Jamf will restrict access to such media and equipment to authorized personnel of Jamf. Jamf will prevent the unauthorized reading, copying modification or removal of data media. ii) Jamf will classify Customer Content so that it is properly identified and will appropriately restrict access to Customer Content. Specifically, Jamf will ensure that no person appointed by Jamf to process Customer Content, will process Customer Content unless that person: 1) has a need to access Customer Content for the purpose of performing Jamf’s obligations under the Agreement; 2) has been authorized by Jamf in a manner consistent with Jamf’s information security policies; 3) has been fully instructed by Jamf in the procedures relevant to the performance of the obligations of Jamf under the Agreement, in particular the limited purpose of processing Customer Content; and 4) is aware that they are prohibited from copying any Customer Content transmitted by Customer to Jamf, provided, however, that Jamf may retain copies of Customer Content provided to it under the Agreement in its servers for backup and archive purposes until completion of the Agreement. iii) Jamf will further maintain measures to ensure that persons appointed by Jamf to process Customer Content will prevent the unauthorized input of Customer Content and the unauthorized inspection, modification, or deletion of stored Customer Content. iv) Jamf will maintain an appropriate approval process whereby approval is provided to personnel, contractors, and agents prior to storing Customer Content on portable devices or remotely accessing Customer Content. All approvals will be subject to measures designed to prevent the unauthorized reading, copying, modification or deletion of Customer Content during transfers of such content or during transportation of data media. If remote access is approved and granted, Jamf personnel, agents agents, and contractors will use multi-multi- factor authentication. Multi-factor authentication may include techniques such as the use of cryptographic certificates, one time one-time- password (OTP) tokens tokens, or biometrics.

Asset Inventory. i) Jamf We will maintain an asset inventory of all media and equipment where Customer Content is stored. Jamf We will restrict access to such media and equipment to authorized personnel of Jamf. Jamf We will prevent the unauthorized reading, copying modification copying, modification, or removal of data media. ii) Jamf We will classify Customer Content so that it is properly identified and will appropriately restrict access to Customer Content. Specifically, Jamf we will ensure that no person appointed by Jamf we appoint to process Customer Content, will process Process Customer Content will do so unless that person: 1) has a need to access Customer Content for the purpose of performing Jamf’s our obligations under the Agreement; 2) has been authorized by Jamf us in a manner consistent with Jamf’s our information security policies; 3) has been fully instructed by Jamf us in the procedures relevant to the performance of the our obligations of Jamf under the Agreement, in particular the limited purpose of processing Processing Customer Content; and 4) is aware that they are prohibited from copying any Customer Content transmitted by Customer you transmit to Jamfus, provided, however, that Jamf we may retain copies of Customer Content provided to it under the Agreement in its our servers for backup and archive purposes until completion of the Agreement. iii) Jamf We will further maintain measures to ensure that the persons appointed by Jamf we appoint to process Process Customer Content will prevent the unauthorized input of Customer Content and the unauthorized inspection, modification, or deletion of stored Customer Content. iv) Jamf We will maintain an appropriate approval process whereby approval is provided to personnel, contractors, and agents prior to storing Customer Content on portable devices or remotely accessing Customer Content. All approvals will be subject to measures designed to prevent the unauthorized reading, copying, modification modification, or deletion of Customer Content during transfers of such content or during transportation of data media. If remote access is approved and granted, Jamf our personnel, agents agents, and contractors will use multi-multi- factor authentication. Multi-factor authentication may include techniques such as the use of cryptographic certificates, one one-time password (“OTP”) tokens tokens, or biometrics.